Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/ce0b8a42-fee1-3e04-bbc2-146e4f46ba25.roa
File:                     ce0b8a42-fee1-3e04-bbc2-146e4f46ba25.roa (raw, json)
Hash identifier:          gn2VigS3uvLafOCpI7JkCX0+kIh7BMJZHW2D9Qqr07E=
Subject key identifier:   CA:E3:39:1A:EA:66:B4:85:F6:FD:71:38:7A:69:F3:91:8F:D4:19:E2
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584DB9568AE45C3C55198AFEF280
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/ce0b8a42-fee1-3e04-bbc2-146e4f46ba25.roa
Signing time:             Mon 04 May 2026 17:20:30 +0000
ROA not before:           Mon 04 May 2026 17:20:30 +0000
ROA not after:            Sun 02 Aug 2026 17:20:30 +0000
asID:                     398391
IP address blocks:        131.226.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:56:8a:e4:5c:3c:55:19:8a:fe:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: May  4 17:20:30 2026 GMT
            Not After : Aug  2 17:20:30 2026 GMT
        Subject: CN=cb00545c-6a64-4db2-9b59-f997abafd4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:19:bf:5e:ee:a9:6a:c7:cc:80:54:03:c7:
                    be:fa:1e:c2:ca:cf:f8:b5:df:72:5f:bf:7a:7c:bb:
                    89:cf:90:6e:fc:b6:c2:73:eb:c0:61:c7:cb:7d:9d:
                    24:bd:d7:29:c7:a3:9f:21:17:06:14:1a:79:be:eb:
                    29:c5:cf:ea:ff:3d:7c:0a:24:68:d4:c9:49:de:09:
                    ec:a1:6a:53:02:ba:9b:b4:aa:b6:4e:49:0d:c3:3f:
                    20:07:fe:17:9d:f3:a0:8a:93:b2:d7:79:6e:d0:b0:
                    61:aa:8f:58:58:ac:28:63:0e:01:67:fc:07:33:3c:
                    cc:e7:d6:dd:2f:8e:b0:71:a6:bd:af:bc:f5:e4:ca:
                    76:32:97:21:fb:95:5b:04:da:fb:b4:95:5f:21:f4:
                    02:31:e7:38:f4:4a:e1:1b:c7:1a:2c:22:02:68:44:
                    d8:64:ba:28:60:db:09:2b:60:8a:dc:1f:29:9e:67:
                    80:19:79:3e:5b:cb:d6:b2:1d:0f:53:b2:ff:e6:17:
                    14:00:36:b7:c0:bf:49:db:f0:0b:16:c9:67:c0:ca:
                    e7:06:c6:80:30:5a:1f:f2:90:e3:ec:f8:05:24:4e:
                    30:19:00:a5:e2:b6:b1:5d:20:18:08:1e:5c:b9:00:
                    ba:49:b8:9f:32:01:ee:6c:66:2d:e5:10:8f:4b:16:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E3:39:1A:EA:66:B4:85:F6:FD:71:38:7A:69:F3:91:8F:D4:19:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/ce0b8a42-fee1-3e04-bbc2-146e4f46ba25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:64:9a:a5:8d:bd:77:18:cf:4c:69:82:cf:5d:1e:bf:b5:
         c5:72:bc:c6:2a:dc:3e:d4:84:50:be:21:d0:c7:49:f7:d7:81:
         23:55:29:7e:bd:23:a2:03:ef:e6:6e:5e:be:db:aa:f1:90:24:
         ea:9a:bb:d2:4d:d1:38:c2:ff:4e:fc:8b:a9:db:e1:01:4f:4d:
         1c:ee:60:ed:47:0a:ac:f8:a3:58:28:e3:65:7c:81:45:a6:13:
         e7:7f:d7:ec:7c:ee:82:f7:4c:f6:12:fd:45:44:8d:4d:c4:3f:
         d5:e7:08:d4:9e:74:74:c3:b1:29:3d:f5:ad:4f:ec:e4:90:21:
         47:1d:c4:55:aa:96:63:2b:d4:b1:97:6f:8a:20:e4:2c:4f:c1:
         f3:82:c7:01:a8:d2:06:bb:83:b3:cd:8a:aa:f3:0e:39:ac:07:
         19:ca:38:d2:1b:c7:85:4d:d1:78:4e:79:a5:a8:f9:fc:2a:00:
         7b:1a:0c:5d:0b:c0:b9:9a:46:ca:11:f5:fe:39:a0:9b:c1:01:
         7b:9d:a8:e4:c9:00:fd:fe:3a:d9:8c:7a:c0:71:48:14:3d:e6:
         42:81:06:b8:19:0d:ef:6a:43:b9:a9:92:0f:75:54:35:27:6f:
         43:06:9e:73:f5:e4:5a:05:bf:8f:bb:81:52:59:7e:74:4c:5e:
         fb:5e:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:28 2026 by rpki-client